Jorey Bump
list at joreybump.com
Tue Sep 20 18:05:36 EDT 2005
David Badawi wrote: > how about acl.execute("SELECT * FROM acl WHERE c = %s > AND d > = %s;" % (cID, dID))??? This will work, but is not as secure as using placeholders. It's a recipe for SQL injection.
|